Brocade Fabric OS Command Reference (Supporting Fabric OS v7.3.0) - Manual (Page 1033)

Fabric OS Command Reference 1003
53-1003131-01
secCertUtil
2
To import a PKI-based certificate with configure and enable option in noninteractive mode:
switch:admin> seccertutil import -config swcert \
-enable https -protocol ftp -ipaddr 195.168.38.206 \
-remotedir /users/home/remote_certs -certname file.crt \
-login abcd -password passwd
Success: imported certificate [file.crt].
Certificate file in configuration has been updated.
Secure http has been enabled.
To export the switch certificate from the switch to the remote host in interactive mode:
switch:admin> seccertutil import -commonswcert
Select protocol [ftp or scp]: scp
Enter IP address: 10.32.2.25
Enter remote directory: /users/myname/OPENSSL
Enter certificate name (must have ".pem" suffix):01.pem
Enter Login Name: myname
[email protected]'s password:
Success: imported certificate [01.pem].
To export the switch certificate from the switch to the remote host in noninteractive mode:
switch:admin> seccertutil import -commonswcert \
-ipaddr 10.32.2.25 -remotedir /users/myname/OPENSSL \
certs -certname 01.pem -login myname -password passwd
Success: imported certificate [01.pem].
To export an LDAP CA certificate from the local switch to a remote host in interactive mode:
switch:admin> seccertutil export -ldapcacert
Select protocol [ftp or scp]: scp
Enter IP address: 192.168.38.206
Enter remote directory: /users/home/remote/mycerts
Enter Login Name: username
Enter LDAP certificate name (must have ".pem" \
or ".crt" or ".cer" suffix):ldap.cer
Password:password
Success: exported LDAP certificate
To export an LDAP CA certificate from the local switch to a remote host in noninteractive mode:
switch:admin> seccertutil export -ldapcacert \
-protocol ftp -ipaddr 192.168.38.206 \
-remotedir /users/home/remote_certs \
-login abcd -passwd passwd -certname ldap.cer
Success: exported LDAP certificate
To export an FCAP switch certificate in interactive mode:
switch:admin> seccertutil export -fcapswcert
Select protocol [ftp or scp]: scp
Enter IP address: 10.32.2.25
Enter remote directory: /users/myname/OPENSSL
Enter Login Name: myname
[email protected]'s password:
Success: exported FCAP switch certificate